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Claims 




A method inducing steps for collecting aggregate information about 

4 network tr^H^ while maintaining processor load relatively constant despite substantial 

5 variation in network traffic. 
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A system including 
means for collecting aggregate information about network traffic; and 
means for maintaining processor load relatively constant for said means for 
collecting despite substantial variation in netw)rk traffic. 




A system, including 
an input port for receiving network Aackets; 
a sampling element for selecting a fraction of those packets for review, said 
sampling element including a feedback element for apaptively altering said fraction; 
a queue of selected packets; 
a packet-type detector coupled to said qu&ie; and 
a frequency measurement element coupledio said packet-type detector. 



A system as in 



21 to a length of said queue. 




wherein said feedback element is responsive 
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1 5. A system as in claim 3, wherein said feedback element is responsive 

2 to a load on said frequency measurement element. 

3 

4 6. A system as in claim 3, wherein said feedback element is responsive 

5 to a frequency measure determined by said frequency measurement element. 
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7 ^ / ^ met hod, including steps for sampling a set of packets at a network 

8 interface of a switch, said steps for sampling including steps for adaptively altering a 

9 fraction of said packets for selection. 



8. A method dsVuT^^im 7, wherein said steps for adaptively altering a 




42 fraction of said packets for se^q^iMraptode steps for 
\fl 3 maintaining a queue\of seized packets; 

Q4 altering said fraction in response to a length of said queue. 

16 9. A method as in claim 7, wherein said steps for adaptively altering a 

17 fraction of said packets for selection include steps for 

18 measuring a frequency of packets of a known type within said selected 

19 packets; 

20 altering said fraction in response to a load imposed by said steps for meas- 

21 uring. 
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1 10. A method as in claim 7, wherein said steps for adaptively altering a 

2 fraction of said packets for selection include steps for altering said fraction in response to 

3 two or more factors responsive to said selected packets. 

4 

5 1 1 . A method as in claim 7, including steps for determining a frequency 

6 of packets of a known type within said selected packets. 

7 

8 12. A method as in claim 11, including steps for determining an error 

-=i9 range for said measured frequency. 

Lfii 13. A method as in claim 1 1, including steps for 

*p2 setting a control parameter; 

ir!3 sampling said received packets in response to said control parameter, to 

;fl4 provide a queue of sampled packets; 

comparing a length of said queue with a threshold; 
16 altering said control parameter in response to said threshold. 

17 

18 14. A method as in claim 13, wherein said control parameter is a fraction 

19 of said received packets to sample for said queue. 

20 

21 15. A method as in claim 13, wherein said threshold includes at least one 

22 of: a lower bound for said length, an upper bound for said length. 
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2 16. A method as in claim 13, wherein said threshold includes a lower 

3 bound for said length and said steps for altering said control parameter operate to 

4 lengthen said queue in response to said steps for comparing. 

5 

6 1 7. A method as in claim 1 3, wherein 

7 said control parameter is a fraction of said received packets to sample for 

8 said queue; 

said threshold includes a lower bound for said length; and 

;30 said steps for altering said control parameter decrease said control parame- 

!fli ter in response to said steps for comparing, 

i: 

1^3 18. A method as in claim 13, wherein said threshold includes an upper 

•04 bound for said length and said steps for altering said control parameter operate to shorten 
said queue in response to said steps for comparing. 

16 

17 19. A method as in claim 13, wherein 

18 said control parameter is a fraction of said received packets to sample for 

19 said queue; 

20 said threshold includes an upper bound for said length; and 

21 said steps for altering said control parameter increase said control parameter 

22 in response to said steps for comparing. 
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20. A method as in claim 13, wherein said steps for altering said control 
parameter operate to maintain said control parameter constant for at least a selected num- 
ber of sampled packets. 

21. A method as in claim 13, wherein said steps for sampling do not 
produce skew. 




